VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jul 17, 2022· Updated Jun 17, 2026

CVE-2022-30622

CVE-2022-30622

Description

Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sys_username_passwd.cmd - The server loads the request clearly by default. Disclosure of hard-coded credit information within the JS code sent to the customer within the Login.js file is a strong user (which is not documented) and also the password, which allow for super-user access. Username: chcadmin, Password: chcpassword.

Affected products

3
  • Chbg/P5e Gnss Firmware2 versions
    cpe:2.3:o:chcnav:p5e_gnss_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:chcnav:p5e_gnss_firmware:*:*:*:*:*:*:*:*range: <=4.1
    • cpe:2.3:o:chcnav:p5e_gnss_firmware:4.2:*:*:*:*:*:*:*
  • Chbg/Chcnav P5e Gnssv5
    Range: 4.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.